openauditB85out of 100: openaudit's audit of itself
iac.checkov

Checkov

Runs Checkov's policy library over Terraform, Kubernetes, CloudFormation, Helm, Dockerfiles and CI configs.

Engine
Wrapped scanner
Wraps
checkov
Targets
Infrastructure as code
Areas
Security, Best practices
Runs
By default, when the target applies
Network
Only the target itself

Run only this auditor

bunx openaudit . --only iac.checkov

Wraps checkov. When it isn't installed, the auditor is skipped with an install hint and the rest of the audit runs.